{"id":"CVE-2024-41055","summary":"mm: prevent derefencing NULL ptr in pfn_section_valid()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm: prevent derefencing NULL ptr in pfn_section_valid()\n\nCommit 5ec8e8ea8b77 (\"mm/sparsemem: fix race in accessing\nmemory_section-\u003eusage\") changed pfn_section_valid() to add a READ_ONCE()\ncall around \"ms-\u003eusage\" to fix a race with section_deactivate() where\nms-\u003eusage can be cleared.  The READ_ONCE() call, by itself, is not enough\nto prevent NULL pointer dereference.  We need to check its value before\ndereferencing it.","modified":"2026-10-08T02:48:33.833837871Z","published":"2024-07-29T14:32:10.672Z","related":["ALSA-2024:6567","ALSA-2024:7000","ALSA-2024:7001","SUSE-SU-2025:0784-1","SUSE-SU-2025:0847-1","SUSE-SU-2025:0856-1","SUSE-SU-2025:0955-1","SUSE-SU-2025:20190-1","SUSE-SU-2025:20192-1","SUSE-SU-2025:20260-1","SUSE-SU-2025:20270-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41055.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0100aeb8a12d51950418e685f879cc80cb8e5982"},{"type":"WEB","url":"https://git.kernel.org/stable/c/797323d1cf92d09b7a017cfec576d9babf99cde7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/82f0b6f041fad768c28b4ad05a683065412c226e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/941e816185661bf2b44b488565d09444ae316509"},{"type":"WEB","url":"https://git.kernel.org/stable/c/adccdf702b4ea913ded5ff512239e382d7473b63"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bc17f2377818dca643a74499c3f5333500c90503"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41055.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41055"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"90ad17575d26874287271127d43ef3c2af876cea"},{"fixed":"0100aeb8a12d51950418e685f879cc80cb8e5982"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b448de2459b6d62a53892487ab18b7d823ff0529"},{"fixed":"bc17f2377818dca643a74499c3f5333500c90503"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"68ed9e33324021e9d6b798e9db00ca3093d2012a"},{"fixed":"941e816185661bf2b44b488565d09444ae316509"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"70064241f2229f7ba7b9599a98f68d9142e81a97"},{"fixed":"797323d1cf92d09b7a017cfec576d9babf99cde7"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5ec8e8ea8b7783fab150cf86404fc38cb4db8800"},{"fixed":"adccdf702b4ea913ded5ff512239e382d7473b63"},{"fixed":"82f0b6f041fad768c28b4ad05a683065412c226e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.10.210"},{"fixed":"5.10.222"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.15.149"},{"fixed":"5.15.163"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.1.76"},{"fixed":"6.1.100"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.6.15"},{"fixed":"6.6.41"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.7.3"},{"fixed":"6.8"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3a01daace71b521563c38bbbf874e14c3e58adb7"}]}],"versions":["v5.10.221","v5.10.220","v5.10.219","v5.10.218","v5.10.217","v5.10.216","v5.10.215","v5.10.214","v5.10.213","v5.10.212","v5.10.211","v5.10.210","v5.15.162","v5.15.161","v5.15.160","v5.15.159","v5.15.158","v5.15.157","v5.15.156","v5.15.155","v5.15.154","v5.15.153","v5.15.152","v5.15.151","v5.15.150","v5.15.149","v6.1.99","v6.1.98","v6.1.97","v6.1.96","v6.1.95","v6.1.94","v6.1.93","v6.1.92","v6.1.91","v6.1.90","v6.1.89","v6.1.88","v6.1.87","v6.1.86","v6.1.85","v6.1.84","v6.1.83","v6.1.82","v6.1.81","v6.1.80","v6.1.79","v6.1.78","v6.1.77","v6.1.76","v6.6.40","v6.6.39","v6.6.38","v6.6.37","v6.6.36","v6.6.35","v6.6.34","v6.6.33","v6.6.32","v6.6.31","v6.6.30","v6.6.29","v6.6.28","v6.6.27","v6.6.26","v6.6.25","v6.6.24","v6.6.23","v6.6.22","v6.6.21","v6.6.20","v6.6.19","v6.6.18","v6.6.17","v6.6.16","v6.6.15","v6.7.12","v6.7.11","v6.7.10","v6.7.9","v6.7.8","v6.7.7","v6.7.6","v6.7.5","v6.7.4","v6.7.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41055.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.163"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.100"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.41"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.9.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41055.json"}}],"schema_version":"1.9.0"}